The following output is generated when trying to obtain tickets from the Kerberos realm:
# kinit user@SUB.DOMAIN.BIZ
Password for user@SUB.DOMAIN.BIZ
kinit(v5): Clock skew too great while getting initial credentials. How can the problem be fixed? (Choose TWO correct answers.)

A.
ntpdate domaincontroller; hwclock -systohc

B.
kinit -t

C.
killall -HUP krb5kdc

D.
Modify the time_sync value in the kdc.conf file.

E.
Modify the clockskew value in the krb5.conf file.